Digg this topic Add to my del.icio.us Submit to SlashDot  
Reply to this topicStart new topic
> Mount DD image split into smaller files?
Turtlecove
post Feb 5 2008, 11:48 PM
Post #1


Newbie
*

Group: Members
Posts: 3
Joined: 5-February 08
Member No.: 13,064



How can I mount a raw DD image of a drive that is split into many smaller files?

ie: instead of mounting myimage.dd I want to mount myimage.dd.01, myimage.dd.02, myimage.dd.03, myimage.dd.04, etc.
Go to the top of the page
 
+Quote Post
TheHive
post Feb 6 2008, 08:15 AM
Post #2


Advanced Member
***

Group: .script developer
Posts: 2,124
Joined: 14-July 06
Member No.: 5



Welcome to the community.
First a first post. That possibility seems like a good idea.
Go to the top of the page
 
+Quote Post
Turtlecove
post Feb 6 2008, 03:33 PM
Post #3


Newbie
*

Group: Members
Posts: 3
Joined: 5-February 08
Member No.: 13,064



QUOTE (TheHive @ Feb 6 2008, 08:15 AM) *
Welcome to the community.
First a first post. That possibility seems like a good idea.

Thank you.

If the capability to mount split files is built into IMDISK, I can't figure out how.
If it is not built in, it seems from what I am reading on this forum that a simple user-land script can be written to handle the translation between the IMDISK device and the actual file layout. Could someone elaborate on that? I could write this script in Perl if I understood what the interface is (Note: I am running on Windows, not Linux).

Go to the top of the page
 
+Quote Post
Olof Lagerkvist
post Feb 6 2008, 04:02 PM
Post #4


Advanced Member
***

Group: Developer
Posts: 120
Joined: 27-April 07
From: Borås, Sweden
Member No.: 6,234


Sweden


QUOTE (Turtlecove @ Feb 6 2008, 04:33 PM) *
If the capability to mount split files is built into IMDISK, I can't figure out how.

There is no such feature at the moment.
QUOTE (Turtlecove @ Feb 6 2008, 04:33 PM) *
If it is not built in, it seems from what I am reading on this forum that a simple user-land script can be written to handle the translation between the IMDISK device and the actual file layout. Could someone elaborate on that? I could write this script in Perl if I understood what the interface is (Note: I am running on Windows, not Linux).

You are right, this would probably be the easiest way to implement this. The user-mode program must answer I/O requests, either over a TCP/IP connection or a named pipe. The protocol used is quite simple, the headers are specified in the file inc\imdproxy.h in the source package.

I could write this myself but it would take a while before I can do it, the problem is that I have a lot of other things to do right now but it would not be any problem otherwise (IMG:../forums/style_emoticons/default/smile.gif)
Go to the top of the page
 
+Quote Post
psc
post Feb 6 2008, 05:31 PM
Post #5


Guru
***

Group: .script developer
Posts: 3,868
Joined: 14-July 06
From: Korschenbroich, Germany
Member No.: 3


Germany


The job seems to be interesting for everybody.

But I have some concerns:

@Turtlecove: Do you really need this feature or is it just an 'academic' idea?
If you need, please explain your background.

I would not agree that Olof spends a lot of time, just to proof that a 'theoretical construction' can be done with his ImDisk driver.

If it is really needed:
@Olof: I give you time to finish until eastern (and you tell us which year)

(IMG:../forums/style_emoticons/default/cheers.gif) Peter
Go to the top of the page
 
+Quote Post
Turtlecove
post Feb 6 2008, 11:52 PM
Post #6


Newbie
*

Group: Members
Posts: 3
Joined: 5-February 08
Member No.: 13,064



QUOTE (psc @ Feb 6 2008, 05:31 PM) *
The job seems to be interesting for everybody.

@Turtlecove: Do you really need this feature or is it just an 'academic' idea?

Yes, I need it; It is not just academic.
I work with disk images made by tools such as FTK Imager and dcfldd (dd) using the split option. These tools prefer to split the image into smaller segment files. The smaller files can be stored on FAT32 filesystems and moved between Windows, Linux, and Mac more easily.

There are many excellent utilities that work on single monolithic disk images, such as Scalpel and various anti-virus tools for example. These tools cannot work on the split images. If I could mount the split images as a drive I could run these tools against the mounted drive.

Another goal is to use libewf to make IMDISK able to mount EnCase images directly. There is a similar program mount-ewf but it is Linux ONLY.


Go to the top of the page
 
+Quote Post
« Next Oldest · ImDisk · Next Newest »
 

Fast ReplyReply to this topicStart new topic

Members Who Viewed Topic Today ()

 

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

RSS Lo-Fi Version Time is now: 27th February 2008 - 05:23 PM

MKPortal ©2003-2006 mkportal.it